Suspicious
Suspect

ea1b79e4ad6a58619a3e355b5ef4f7d8

ZIP Archive
|
MD5: ea1b79e4ad6a58619a3e355b5ef4f7d8
|
Size: 15.39 MB
|
application/zip

Print
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
ea1b79e4ad6a58619a3e355b5ef4f7d8
Sha1
14331c241da4b6f0e1e82a2de1a2a9a00608eaac
Sha256
a7835afd2be9d2b8c770633a8b7fcf635d6a6fb232327bb15dad103bfdf7c058
Sha384
738f8dce95503813fa822c438b159ad04ee0a750ab74ff19e890d9b0b55117b4c142376c937fd5a318ccb29e148fb70d
Sha512
00a2a97b7762793881f937cafcdd78ff3497749537b6fc390444706acd93cda28c04a688d99bc27d6047298bb66fbd725842940e0b6d374fd71cd606915f3ed8
SSDeep
393216:K1vThznL1urBB8on2EcaXQcU2lGNKiIa9UkgENKhmPY7CK:aLh34rlHtXX/lGQI9UkgjHt
TLSH
8CF633C0FCFA1763D649E5B693A076063D0B8C518F551E2A62F533223E733999626BCC
File Structure
ea1b79e4ad6a58619a3e355b5ef4f7d8
Installer.08-79-1-98.exe
[Authenticode]_23312022.p7b
App
error_log
AppInfo
appicon_32.png
appicon_32.png-preview.png
appicon_128.png
appicon_128.png-preview.png
appicon.ico
appinfo.ini
appicon_16.png
appicon_16.png-preview.png
appicon111.ico
appicon_75.png
appicon_75.png-preview.png
Launcher
Installer.08-79-1-98.ini
splash.jpg
splash.jpg.exif
splash.jpg-preview.png
license.txt
omega22889
Installer-08-79-1-98.exe
[Authenticode]_9be44668.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.tls
.rsrc
.reloc
Resources
WEVT_TEMPLATE
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_STRING
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
RT_MESSAGETABLE
ID:0001
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
wfpdiag.etl
Installer-08-79-1-98.dll
Caches
cversions.2.db
{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db
{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db
Windows-gather.db-wal
Readme.txt
Artefacts
Name
 Value
PE Layout

MemoryMapped (process dump suspected)
URLs in VB Code - #1

http://www.unicode.org/copyright.html
URLs in VB Code - #2

https://github.com/nodejs/node/pull/1771#issuecomment-119351671
URLs in VB Code - #3

https://github.com/chalk/ansi-regex/blob/master/index.js
URLs in VB Code - #4

http://www.unicode.org/Public/UNIDATA/EastAsianWidth.txt
URLs in VB Code - #5

http://www.midnight-commander.org/browser/lib/tty/key.c
URLs in VB Code - #6

https://mathiasbynens.be/notes/javascript-encoding
URLs in VB Code - #7

https://tools.ietf.org/html/rfc3492#section-3.4
URLs in VB Code - #8

http://www.ecma-international.org/ecma-262/5.1/#sec-15.1.3.4
URLs in VB Code - #9

https://nodejs.org/download/release/
URLs in VB Code - #10

http://en.wikipedia.org/wiki/ANSI_escape_code#graphics
URLs in VB Code - #11

https://goo.gl/t5IS6M
URLs in VB Code - #12

https://github.com/antirez/linenoise
URLs in VB Code - #13

http://invisible-island.net/xterm/ctlseqs/ctlseqs.html
URLs in VB Code - #14

http://www.3waylabs.com/nw/WWW/products/wizcon/vt220.html
URLs in VB Code - #15

https://github.com/nodejs/node-v0.x-archive/issues/2876
URLs in VB Code - #16

https://github.com/joyent/node/issues/3295
URLs in VB Code - #17

https://github.com/nodejs/node/pull/13870#discussion_r124515293
URLs in VB Code - #18

https://github.com/v8/v8/blob/d6ead37d265d7215cf9c5f768f279e21bd170212/src/js/prologue.js#L152-L156
URLs in VB Code - #19

https://tools.ietf.org/html/rfc3986#section-3.2.2
URLs in VB Code - #20

https://tools.ietf.org/html/rfc7540#section-8.1.2.5
URLs in VB Code - #21

https://tools.ietf.org/html/rfc7230#section-3.2.2
URLs in VB Code - #22

http://www.squid-cache.org/Doc/config/half_closed_clients/
URLs in VB Code - #23

http://wiki.squid-cache.org/SquidFaq/InnerWorkings#What_is_a_half-closed_filedescriptor.3F
URLs in VB Code - #24

https://github.com/nodejs/node/issues/13435
URLs in VB Code - #25

http://src.chromium.org/viewvc/blink/trunk/Source/devtools/front_end/SourceMap.js
URLs in VB Code - #26

http://code.google.com/p/closure-compiler/wiki/SourceMaps
URLs in VB Code - #27

https://tc39.github.io/ecma262/#sec-%iteratorprototype%-object
URLs in VB Code - #28

https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque
URLs in VB Code - #29

https://html.spec.whatwg.org/multipage/browsers.html#ascii-serialisation-of-an-origin
URLs in VB Code - #30

https://url.spec.whatwg.org/#concept-url
URLs in VB Code - #31

https://url.spec.whatwg.org/#cannot-have-a-username-password-port
URLs in VB Code - #32

https://heycam.github.io/webidl/#es-stringifier
URLs in VB Code - #33

https://url.spec.whatwg.org/#concept-url-origin
URLs in VB Code - #34

https://url.spec.whatwg.org/#concept-urlencoded-parser
URLs in VB Code - #35

https://url.spec.whatwg.org/#concept-urlencoded-byte-serializer
URLs in VB Code - #36

https://url.spec.whatwg.org/#concept-urlencoded-serializer
URLs in VB Code - #37

https://heycam.github.io/webidl/#dfn-class-string
URLs in VB Code - #38

https://heycam.github.io/webidl/#es-operations
URLs in VB Code - #39

https://heycam.github.io/webidl/#es-iterators
URLs in VB Code - #40

https://heycam.github.io/webidl/#es-iterable
URLs in VB Code - #41

https://url.spec.whatwg.org/#urlsearchparams-stringification-behavior
URLs in VB Code - #42

https://heycam.github.io/webidl/#es-iterable-entries
URLs in VB Code - #43

https://heycam.github.io/webidl/#dfn-default-iterator-object
URLs in VB Code - #44

https://heycam.github.io/webidl/#dfn-iterator-prototype-object
URLs in VB Code - #45

https://tools.ietf.org/html/rfc7230#section-3.2.6
URLs in VB Code - #46

http://invisible-island.net/ncurses/terminfo.ti.html#toc-_Specials
URLs in VB Code - #47

https://github.com/nodejs/node/issues/3392
URLs in VB Code - #48

https://github.com/nodejs/node/pull/3394
URLs in VB Code - #49

http://stackoverflow.com/a/5501711/3561
URLs in VB Code - #50

https://github.com/nodejs/node/wiki/Intl
URLs in VB Code - #51

https://github.com/nodejs/node/pull/11513
URLs in VB Code - #52

https://github.com/nodejs/node/pull/12342
URLs in VB Code - #53

https://console.spec.whatwg.org/#clear
URLs in VB Code - #54

https://console.spec.whatwg.org/#count
URLs in VB Code - #55

https://console.spec.whatwg.org
URLs in VB Code - #56

https://mxr.mozilla.org/mozilla/source/netwerk/protocol/http/src/nsHttpHeaderArray.cpp
URLs in VB Code - #57

https://code.google.com/p/chromium/issues/detail?id=25916
URLs in VB Code - #58

http://a@b?@c
URLs in VB Code - #59

http://www.example.com
URLs in VB Code - #60

https://github.com/nodejs/node/pull/14389/files#r128522202
URLs in VB Code - #61

https://github.com/joyent/node/issues/1707
URLs in VB Code - #62

https://github.com/nodejs/node/issues/2119
URLs in VB Code - #63

http://www.ecma-international.org/publications/standards/Ecma-262.htm
URLs in VB Code - #64

https://github.com/nodejs/node/pull/7829
URLs in VB Code - #65

http://www.iana.org/assignments/tls-extensiontype-values
URLs in VB Code - #66

http://narwhaljs.org
URLs in VB Code - #67

https://tc39.github.io/ecma262/#sec-object.prototype.tostring
URLs in VB Code - #68

https://github.com/nodejs/node-v0.x-archive/pull/7178
URLs in VB Code - #69

https://encoding.spec.whatwg.org
URLs in VB Code - #70

https://github.com/nodejs/node/issues/4467
URLs in VB Code - #71

https://nodejs.org/en/docs/inspector
URLs in VB Code - #72

https://nodejs.org/static/favicon.ico
URLs in VB Code - #73

https://nodejs.org/download/release/v8.17.0/node-v8.17.0.tar.gz
URLs in VB Code - #74

https://nodejs.org/download/release/v8.17.0/node-v8.17.0-headers.tar.gz
URLs in VB Code - #75

https://nodejs.org/download/release/v8.17.0/win-x86/node.lib
URLs in VB Code - #76

https://nodejs.org/
URLs in VB Code - #77

http://www.openssl.org/support/faq.html
URLs in VB Code - #78

https://www.globalsign.com/repository/03
URLs in VB Code - #79

http://crl.globalsign.net/root.crl0
URLs in VB Code - #80

https://www.globalsign.com/repository/0
URLs in VB Code - #81

http://crl.globalsign.com/gs/gstimestampingg2.crl0T
URLs in VB Code - #82

http://secure.globalsign.com/cacert/gstimestampingg2.crt0
URLs in VB Code - #83

http://crl3.digicert.com/sha2-assured-cs-g1.crl05
URLs in VB Code - #84

http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
URLs in VB Code - #85

https://www.digicert.com/CPS0
URLs in VB Code - #86

http://ocsp.digicert.com0N
URLs in VB Code - #87

http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
URLs in VB Code - #88

http://ocsp.digicert.com0C
URLs in VB Code - #89

http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
URLs in VB Code - #90

http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
URLs in VB Code - #91

http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
URLs in VB Code - #92

https://nodejs.org0
ea1b79e4ad6a58619a3e355b5ef4f7d8 (15.39 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙